This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft File: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft (raw, json) Hash identifier: OoKe4twTOWGLpLf6jE4fOYicXvUybU1EaaTkiutPG2A= Subject key identifier: FE:21:05:7F:E0:35:67:EA:BE:95:4C:77:F1:0C:9F:5F:18:A4:88:64 Authority key identifier: FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A Certificate issuer: /CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a Certificate serial: 019AF49C564E301755DA4DEC8570D224BA91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 17:01:17 +0000 Manifest this update: Sat 06 Dec 2025 17:01:17 +0000 Manifest next update: Sun 07 Dec 2025 17:01:17 +0000 Files and hashes: 1: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl (hash: +Eq4wqxZ8y87YSamakxZA//ShT6inEaiXw3bOEcA4Ks=) 2: jWNgVTvc3owe3kF91r8d7uRQV_o.roa (hash: uQLZ/d2z4o+33Z42D6wrDoH9q/yv6pAWgOV+vjfJeYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:56:4e:30:17:55:da:4d:ec:85:70:d2:24:ba:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a Validity Not Before: Dec 6 17:01:17 2025 GMT Not After : Dec 7 17:01:17 2025 GMT Subject: CN=fe21057fe03567eabe954c77f10c9f5f18a48864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:70:69:a4:7b:1e:43:71:64:f2:26:61:38:4b: 8a:b4:dc:ec:d5:73:94:5b:55:bd:ab:11:0a:be:96: 26:5e:1b:e2:40:13:d2:f7:89:98:fd:02:c9:9b:02: f5:fd:75:6f:e8:ad:7f:f3:34:f0:fd:7d:91:52:d3: b4:bd:d2:0c:0b:98:82:57:8d:15:b9:aa:ab:17:8e: 22:9e:d3:2d:8a:7e:3d:85:99:64:50:43:16:bc:ea: 42:a4:19:e7:86:0e:dc:39:2b:c3:2f:fd:0e:2b:60: 1c:39:e9:96:fa:57:4c:68:11:81:28:95:a2:49:0f: a6:64:48:e8:db:9f:51:84:11:4b:de:1d:c4:90:b7: ba:14:df:11:d7:2e:e3:1f:47:d8:3d:46:63:99:54: 84:5c:56:b2:96:e5:c3:5d:96:70:f1:30:a4:17:5c: 15:93:dd:6d:55:1e:b6:ed:15:ac:bb:a4:fd:8d:1f: 1a:d3:4e:89:17:68:13:3b:1c:48:48:7e:04:a3:5a: fa:01:1c:ea:4b:7f:7d:d2:28:65:f6:0c:65:06:32: 5c:27:eb:55:ba:42:30:72:97:65:7d:cb:45:d0:b5: dd:95:55:2b:d8:3e:00:22:a0:74:28:4e:1e:e8:9f: 80:aa:bd:a6:65:75:89:28:35:1d:fc:04:04:4d:db: 39:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:21:05:7F:E0:35:67:EA:BE:95:4C:77:F1:0C:9F:5F:18:A4:88:64 X509v3 Authority Key Identifier: keyid:FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b0:21:c8:65:64:bf:b6:15:80:80:01:d4:c9:f8:83:62:a2: a6:a2:ae:40:d1:03:d4:d6:c7:f2:f2:bf:dc:c8:14:02:67:f0: 1a:8a:d2:65:a9:02:f8:95:14:ff:8a:7f:55:f9:e7:21:e0:52: fe:35:d8:74:62:16:7c:71:b5:2b:82:03:e9:18:49:74:af:5b: a9:bc:42:34:ef:61:11:b3:41:26:4b:24:c0:65:cb:da:5e:bb: e9:f7:5e:b4:e1:9b:ec:57:e1:c1:84:a4:3f:32:ac:ca:34:bd: 5b:63:d6:b3:94:b2:65:04:73:b9:71:db:f3:7a:4d:a8:46:d5: e3:de:77:fe:4c:63:8e:9e:f5:ac:8d:09:8f:50:c6:5f:05:95: dd:32:83:9f:5a:fb:81:fe:78:f1:fc:6c:db:44:ba:b6:4e:fd: 58:7b:8f:98:b5:ed:4a:f9:4d:15:5f:da:d6:39:76:de:13:8d: 84:c6:51:45:95:f5:a9:c6:ce:2f:30:9b:e0:1b:9f:e4:5b:bd: 62:a6:27:29:8b:e8:c2:c6:88:43:4f:75:23:66:f2:5f:7c:05: 4c:bd:73:44:2c:5a:f8:a6:72:95:b5:20:ac:89:11:97:8c:17: af:91:8a:89:05:c6:94:b9:07:50:17:9e:a7:4b:15:c2:e5:76: 41:c4:82:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nFZOMBdV2k3shXDSJLqRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkY2I5NzZiYjYwMjkyMTZmN2EyYWQwNWI3OTMyZjRhNTVl MGNmOGEwHhcNMjUxMjA2MTcwMTE3WhcNMjUxMjA3MTcwMTE3WjAzMTEwLwYDVQQD EyhmZTIxMDU3ZmUwMzU2N2VhYmU5NTRjNzdmMTBjOWY1ZjE4YTQ4ODY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3BppHseQ3Fk8iZhOEuKtNzs1XOU W1W9qxEKvpYmXhviQBPS94mY/QLJmwL1/XVv6K1/8zTw/X2RUtO0vdIMC5iCV40V uaqrF44intMtin49hZlkUEMWvOpCpBnnhg7cOSvDL/0OK2AcOemW+ldMaBGBKJWi SQ+mZEjo259RhBFL3h3EkLe6FN8R1y7jH0fYPUZjmVSEXFayluXDXZZw8TCkF1wV k91tVR627RWsu6T9jR8a006JF2gTOxxISH4Eo1r6ARzqS3990ihl9gxlBjJcJ+tV ukIwcpdlfctF0LXdlVUr2D4AIqB0KE4e6J+Aqr2mZXWJKDUd/AQETds5CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4hBX/gNWfqvpVMd/EMn18YpIhkMB8GA1UdIwQY MBaAFP3Ll2u2ApIW96KtBbeTL0pV4M+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80OTRmMjctNGJiYy00YjM4LTg0OWIt ZDg4OGEwNjg5YzE5LzEvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80OTRmMjctNGJiYy00YjM4LTg0OWItZDg4OGEwNjg5YzE5 LzEvX2N1WGE3WUNraGIzb3EwRnQ1TXZTbFhnejRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7AhyGVk v7YVgIAB1Mn4g2KipqKuQNED1NbH8vK/3MgUAmfwGorSZakC+JUU/4p/VfnnIeBS /jXYdGIWfHG1K4ID6RhJdK9bqbxCNO9hEbNBJkskwGXL2l676fdetOGb7FfhwYSk PzKsyjS9W2PWs5SyZQRzuXHb83pNqEbV4953/kxjjp71rI0Jj1DGXwWV3TKDn1r7 gf548fxs20S6tk79WHuPmLXtSvlNFV/a1jl23hONhMZRRZX1qcbOLzCb4Buf5Fu9 YqYnKYvowsaIQ091I2byX3wFTL1zRCxa+KZylbUgrIkRl4wXr5GKiQXGlLkHUBee p0sVwuV2QcSC1Q== -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:46 2025 by rpki-client